Amazon Linux 2

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1850 Related CVEs: CVE-2021-45417 CVE-2025-54409 Upstream summary: A heap-based buffer overflow vulnerability in the base64 functions of AIDE, an advanced intrusion detection system. An attacker could crash the program and […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1827 Related CVEs: CVE-2022-24801 CVE-2020-10108 CVE-2020-10109 CVE-2022-39348 Upstream summary: A flaw was found in python-twisted. This vulnerability occurs due to the parsing of illegal constructs in the twisted.web.http module. The […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1806 Related CVEs: CVE-2021-44228 CVE-2021-45046 CVE-2022-33915 CVE-2022-0070 CVE-2021-3100 Upstream summary: Versions of the Apache Log4j hotpatch package before log4j-cve-2021-44228-hotpatch-1.3-5 are affected by a race condition that could lead to a […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2-2022-1803 Related CVEs: CVE-2014-3634 CVE-2022-24903 CVE-2019-17041 CVE-2019-17042 CVE-2018-16881 Upstream summary: A flaw was found in the way rsyslog handled invalid log message priority values. In certain configurations, a local attacker, […]

🟠 High   ⏱ 15–60 min  Last verified: 25 May 2026 Affected versions: Amazon Linux 2 📖 ~4 min read  •  Source: Amazon Linux advisory ALAS2NITRO-ENCLAVES-2022-018 Related CVEs: CVE-2022-0778 Upstream summary: The BN_mod_sqrt() function, which computes a modular square root, contains a bug that can cause it to loop forever for non-prime moduli. Internally this […]